Meeting

• Who: SecurityTeam

• When: Mon Apr 2 16:30:59 2018 UTC

• End: 16:45:13

• Where: #ubuntu-meeting on irc.freenode.net

• Chaired By: Emily Ratliff (ratliff)

Attendance

• jdstrand
• sbeattie
• sarnold
• leosilva
• ratliff

Not present

• mdeslaur
• jjohansen
• chrisccoulson

Agenda

• Announcements
  • Generalist role rotation
    • CVE Triage: mdeslaur, Bug Triage: leosilva, Community: sarnold, Happy Place: ratliff, sbeattie
  • Contributions

    • Simon Quigley (tsimonq2) provided debdiffs for xenial-artful for atril (LP: #1759069)

    • Simon Quigley (tsimonq2) provided debdiffs for trusty-xenial for kdepim (LP: #1698180)

    • Ray Link (rlink) provided a debdiff for xenial for xmltooling (LP: #1752306)

• Weekly stand-up report (each member discusses any pending and planned future work for the week)
  • jdstrand
    • address conntrack deprecation issues in ufw for 18.04
    • apparmor upload to 18.04 to fix webbrowser-app and mediascanner2 upgrades
    • finish up miscellaneous updates branches for snapd
    • pick up the snap/usn notification work as have time
    • mdeslaur
      • php updates
      • security updates
  • sbeattie
    • openjdk update publication
    • kernel USN publication
    • gcc retpoline backports for 12.04 ESM
    • kernel CVE triage
    • jjohansen

      • AppArmor bugs

        • LXD issue with apparmor: https://github.com/lxc/lxd/issues/4340

        • follow up on dangling symlinks apparmorfs issue: https://bugs.launchpad.net/bugs/1755563

      • update bionic LSM stacking patches with the latest upstream revision
  • sarnold
    • MIRs
      • pysmi

    • ChrisCoulson

      • rust/cargo updates
      • thunderbird updates

      • AppArmor auditing changes

      • investigate gcc-6.4 and nodejs build deps for firefox
      • embargoed issues
      • internal issue
  • ratliff
    • KPIs
    • miscellaneous
  • leosilva
    • security updates
• Highlighted packages

  The Ubuntu Security team suggests that contributors look into merging Debian security updates in community-supported packages. If you would like to help Ubuntu but are not sure where to start, this is a great way to do so. See the available merges and SecurityTeam/UpdateProcedures for details on preparing Ubuntu security updates. If you have any questions, feel free to ask in #ubuntu-hardened. To find out other ways of helping out, please see SecurityTeam/GettingInvolved.

• Miscellaneous and Questions

  • Reports of lockups with intel-microcode package. If you are affected, please mark yourself as such on LP: #1759920

Log

http://ubottu.com/meetingology/logs/ubuntu-meeting/2018/ubuntu-meeting.2018-04-02-16.30.moin.txt